Customer Info Assurance Security Manager in Hatfield

Location: UK - Mobile England, UK - Hatfield, UK - London, UK - Milton Keynes, UK - Nottingham, UK - Reading

Contract type: Standard

Business Unit: Cyber Security

Life on the team

We are now looking for a Customer Information Security Manager within our GIS Cybersecurity Organisation. Working as a Customer Security Manager you will be overseeing all cybersecurity matters that relate to our customers, and our contractual obligations to them, driving our ambition to achieve upper quartile cybersecurity maturity (cybersecurity function & environment at NIST CMMi level 3 and above).

As a Customer Information Security Manager, you will ensure effective delivery of security management for our customer accounts, through stakeholder management, contractual compliance, contract governance and security incident management, including support and mentoring for a professional team of security managers where required.

What you’ll do

• Customer Account Security Partnering (~ 40%)
  • Provide key pre-sales support to the account team community.
  • Propose service offerings and the supporting collateral and demonstrate capability to transition service offerings into live service delivery for your allocated customers.
  • Perform workshops and present Information Security services to significant key account customers in accordance with key account management or Sales Team.
  • Ensure and support the liaison to customer stakeholders and internal delivery units in the case of escalations or security incident investigation for customer-facing Information Security issues in your allocated customers.
  • Assist in ensuring all security-related remedial actions internally and externally are carried out in a timely manner.
  • Proactively engage the security risk management processes to assess and address any commercial or contractual impacts for any deviations from our cybersecurity policies and standards, exploring and advising on options for mitigation.
  • Promote awareness of security issues and risks, to ensure our security principles are reflected in our service management goals.
  • Support Lead CISM’s, making sure our security plans align to and support our customer obligations and needs.
• Customer Account Security Operations (~ 55%)
  • Support the Lead CISM’s, in proactively identifying, evaluating, and reducing account cybersecurity risks.
  • Assure Computacenter managed 3rd parties and ISPs deliver in line with the Security Management Plan.
  • Carry out contractual security compliance reviews on a regular basis.
  • Support and conduct security incident exercises alongside customer and delivery teams.
  • Assure security related changes to minimise risk to the customer and the business.
  • Promote the adoption of cybersecurity policies and initiatives that improve our security maturity and ensure security is part of our account operations.
  • Advise on projects or initiatives, to ensure cybersecurity risks are well managed in the delivery of change.
  • Manage overall customer expectations in a complex number of customer accounts and ensure key commitments are met.
  • Ensure solutions are delivered that are consistent with the GIS Cyber Strategy and best practice.
• CISM Team and Resource Management (~ 5%)
  • Provide support to other CISM’s, offering guidance and advice.
  • Attain to goals that align with our mission, ensuring you are well-equipped with the skills and resources to achieve our objectives.
  • Be an ambassador for the CISM team, encouraging teamwork, problem solving and sharing ideas.
  • Support the effective completion of Cyber skills and capability mix in the team to meet business requirements.
  • Support the review and refinement of the Services Catalogue, framework and processes for the Security Management functions.

What you’ll need

• More than 2 years of professional experience in an Information Security / Cyber Security function in an international environment and in cooperation with executives.
• Completed university degree or comparable education/business experience.
• GIS adopted frameworks and processes including ITIL, SAFe, DevSecOps, etc.
• Information security Governance and Management SECTION A (3).
• Secure Operations Management SECTION E1 (3).
• Management, Leadership, Business and Communications SECTION J (3).
• English language level B2 (according to the Common European Framework of Reference for Languages) or comparable.

Key Technical Skills

• Expertise across cybersecurity CISM and CRISC certified.
• Cybersecurity frameworks including NIST CSF, NIST 800-53 and CE+.
• Information security standards including GDPR, SOC 2 and ISO27K.